Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
ravis
Starting Member
7 Posts |
 Posted - 2009-07-15 : 07:58:00
|
| Hi,I want to give exec permission on xp_cmdshell for non-admin(developer) account. I did some googling and tried ,but nothing was useful to me .Any one help on this.Regards,S.Ravi |
|
|
russell
Pyro-ma-ni-yak
5072 Posts |
Posted - 2009-07-15 : 08:31:09
|
Let me start by saying that this is a very bad idea. Surely there is a better way to accomplish what you need.see here: http://msdn.microsoft.com/en-us/library/aa260689(SQL.80).aspxquote:
When xp_cmdshell is invoked by a user who is a member of the sysadmin fixed server role, xp_cmdshell will be executed under the security context in which the SQL Server service is running. When the user is not a member of the sysadmin group, xp_cmdshell will impersonate the SQL Server Agent proxy account, which is specified using xp_sqlagent_proxy_account. If the proxy account is not available, xp_cmdshell will fail. ...Execute permissions for xp_cmdshell default to members of the sysadmin fixed server role, but can be granted to other users. Important If you choose to use a Windows NT account that is not a member of the local administrator's group for the MSSQLServer service, users who are not members of the sysadmin fixed server role cannot execute xp_cmdshell.
|
 |
|
|
|
|
|
Grant exec on xp_cmdshell for non-sysadmin